Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 1311:

  Refer to the exhibit.

  

  An engineer has configured Cisco ISE to assign VLANs to clients based on their method of authentication, but this is not working as expected. Which action will resolve this issue?

  A. require a DHCP address assignment
  B. utilize RADIUS profiling
  C. set a NAC state
  D. enable AAA override
  D. enable AAA override

  ---

  Explanation

  The AAA Override option of a WLAN enables you to configure the WLAN for identity networking. It enables you to apply VLAN tagging, Quality of Service (QoS), and Access Control Lists (ACLs) to individual clients based on the returned RADIUS attributes from the AAA server.

  https://www.cisco.com/c/en/us/td/docs/wireless/controller/7-4/configuration/guides/consolidated/b_cg74_CONSOLIDATED/b_cg74_CONSOLIDATED_chapter_010110111.html

• Question 1312:

  DRAG DROP

  Drag and drop the characteristics of Cisco Catalyst SD-WAN from the left onto the right. Not all options are used.

  Select and Place:

  

  

• Question 1313:

  Refer to the exhibit. After configuring HSRP an engineer enters the show standby command. Which two facts are derived from the output? (Choose two.)

  

  A. The router with IP 10.10 1.3 is active because it has a higher IP address
  B. If Fa0/0 is shut down, the HSRP pnonty on R2 becomes 80
  C. R2 Fa1/0 regains the primary role when the link comes back up
  D. R2 becomes the active router after the hold time expires.
  E. R2 is using the default HSRP hello and hold timers.
  B. If Fa0/0 is shut down, the HSRP pnonty on R2 becomes 80
  E. R2 is using the default HSRP hello and hold timers.

  ---

  Explanation

  Very tricky question, but i will try to explain.

  That is position of darude or the AandE guys:

  R2 is in standby with prio 90.

  R1 is active with prio 85.

  Fa0/0 is down, because otherwise R2 would have prio 80.

  Assuming Fa0/0 is the keep-alive between R2 and R1, R1 is down.

  R2 will detect, that R1 is down in 8.672sec and will take over the active role.

  But from my point of view we can not assume, that Fa0/0 is the keep-alive, because the hold time is 10sec and hello time 3sec. The hold time is expired by only 1.328sec, so we can't know, if the hello message could have reached R1, because the hello time is 3sec.

• Question 1314:

  DRAG DROP

  Drag and drop the snippets onto the blanks within the code to construct a script that blocks a MAC address.

  Select and Place:

  

  

• Question 1315:

  Which mechanism does OAuth use to strengthen REST API security when compared to BasicAuth?

  A. Token
  B. SSL
  C. Authentication
  D. TLS
  A. Token

• Question 1316:

  SIMULATION

  Guidelines

  This is a lab item in which tasks will be performed on virtual devices.

  1. Refer to the Tasks tab to view the tasks for this lab item.

  2. Refer to the Topology tab to access the device console(s) and perform the tasks.

  3. Console access is available for all required devices by clicking the device icon or using the tab(s) above the console window.

  4. All necessary preconfigurations have been applied.

  5. Do not change the enable password or hostname for any device.

  6. Save your configurations to NVRAM before moving to the next item.

  7. Click Next at the bottom of the screen to submit this lab and move to the next question.

  8. When Next is clicked, the lab closes and cannot be reopened.

  Topology

  

  Tasks

  OSPF is partially configured. Complete the OSPF configurations to achieve these goals:

  1. Configure R3 to always be the DR in Area 20. Do not change the router ID.

  2. Configure R2 and R10 so they do not participate in a DR/BDR election process in Area 10.

  A. See the solution below in Explanation.
  B. Place Holder
  C. Place Holder
  D. Place Holder
  A. See the solution below in Explanation.

  ---

  Explanation

  Solution:

  R3

  Int e0/1

  Ip ospf priority 255

  End

  R2

  Int e0/1

  Ip ospf network point-to-point

  End

  R10

  Int e0/0

  Ip ospf network point-to-point

  End

• Question 1317:

  SIMULATION

  Guidelines

  This is a lab item in which tasks will be performed on virtual devices.

  1. Refer to the Tasks tab to view the tasks for this lab item.

  2. Refer to the Topology tab to access the device console(s) and perform the tasks.

  3. Console access is available for all required devices by clicking the device icon or using the tab(s) above the console window.

  4. All necessary pre-configurations have been applied.

  5. Do not remove any existing configurations from the devices, only those necessary to make the appropriate changes required to fulfill the listed tasks.

  6. Do not change the enable password or hostname for any device.

  7. Save your configurations to NVRAM before moving to the next item.

  8. Click Next at the bottom of the screen to submit this lab and move to the next question.

  9. When Next is clicked, the lab closes and cannot be reopened.

  Topology

  

  Tasks

  Configure R1 according to the topology to achieve these results:

  1. Configure eBGP using Loopback 0 for the router-id. Do not use the address-family command to accomplish this.

  2. Advertise R1’s Loopback 100 and Loopback 200 networks to AS20 and AS30.

  A. See the solution below in Explanation.
  B. Place Holder
  C. Place Holder
  D. Place Holder
  A. See the solution below in Explanation.

  ---

  Explanation

  

  

  

• Question 1318:

  Refer to the exhibit.

  

  The web server is configured to listen only to TCP port 8080 for all HTTP requests. Which command is required to allow Internet users to access the web server on HTTP port 80?

  A. ip nat outside static tcp 10.1.1.100 8080 10.1.1.100 80
  B. ip nat inside static tcp 10.1.1.100 80 10.1.1.100 8080
  C. ip nat inside static tcp 10.1.1.100 8080 10.1.1.100 80
  D. ip nat outside static tcp 10.1.1.100 80 10.1.1.100 8080
  C. ip nat inside static tcp 10.1.1.100 8080 10.1.1.100 80

• Question 1319:

  Refer to the exhibit.

  

  Which router is elected as the VRRP primary virtual router?

  A. Router B
  B. Router D
  C. Router C
  D. Router A
  C. Router C

• Question 1320:

  Refer to the exhibit.

  

  A network engineer must configure a password expiry mechanism on the gateway router for all local passwords to expire after 60 days. What is required to complete this task?

  A. Add the username admin privilege 15 common-criteria-policy Administrators password Cisco13579! command.
  B. Add the aaa authentication enable default Administrators command.
  C. The password expiry mechanism is on the AAA server and must be configured there.
  D. No further action is required. The configuration is complete
  A. Add the username admin privilege 15 common-criteria-policy Administrators password Cisco13579! command.

  ---

  Explanation

  SUMMARY STEPS Perform this task to create a password security policy and to apply the policy to a specific user profile.

  enable configure terminal aaa new-model aaa common-criteria policy policy-name char-changes number max-length number min-length number numeric-count number special-case number exit username username common-criteria-policy policy-name password password end